Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: cjmGESmBrKX+SfsSIiBA5bB/URSoANIYb0XUZ5Ma0zg=
Subject key identifier: 74:A6:13:1A:32:D9:7F:C9:9A:34:74:8C:CB:C8:34:B6:E6:3F:67:28
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 019D2C97E922266FE854EA63D0C52374F292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1896
Signing time: Fri 27 Mar 2026 00:00:46 +0000
Manifest this update: Fri 27 Mar 2026 00:00:46 +0000
Manifest next update: Sat 28 Mar 2026 00:00:46 +0000
Files and hashes: 1: 7FzKZswrPdLMxXrapHAy4u7m2Uw.roa (hash: eeouhWOFysyUa2aLWCzo7SnGgUGdzEephMALLA/syrs=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: 55ewoaAo8CtF0tTLGWLyUC6WRl/x+I16vJ/0qlsvD5Y=)
3: WVmtj3JFZW85BM7XmJNCcbMrepg.roa (hash: OySUwjvZewoZ9Ynw/beaBuNhKzmMaff9msuUl57OGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:e9:22:26:6f:e8:54:ea:63:d0:c5:23:74:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Mar 27 00:00:46 2026 GMT
Not After : Mar 28 00:00:46 2026 GMT
Subject: CN=74a6131a32d97fc99a34748ccbc834b6e63f6728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:ec:8c:88:83:db:0c:4b:e7:d2:af:b6:9f:
c4:8b:b0:dd:1e:7b:cf:92:75:87:7d:f4:4e:14:7e:
4e:9f:11:f8:79:ee:25:e1:16:c8:bb:8f:c4:89:be:
e5:cf:1f:e7:a7:82:fe:d4:d6:9c:07:5d:13:fe:0c:
46:bc:12:1d:a8:7e:1d:82:c9:56:fe:58:95:fd:53:
43:3d:96:52:48:83:b0:71:ae:5d:8a:78:87:93:e1:
02:25:93:da:eb:a3:4a:56:ea:d9:d6:7f:fd:8f:6d:
97:52:60:29:d3:b7:13:74:ab:96:ba:d6:43:ac:db:
3a:20:32:98:25:4e:df:24:ab:0e:93:05:79:2c:d0:
11:48:7a:5d:77:05:55:7d:5b:1d:87:f2:bb:85:62:
56:a4:7f:e2:8f:db:29:5d:7c:c9:ad:ff:74:0f:b3:
39:8e:69:f9:2e:c4:23:de:a1:fa:79:1d:65:88:0b:
b4:0e:86:2b:14:45:07:88:fe:5b:35:97:e5:fc:82:
21:6e:6c:a9:3f:b3:10:20:a7:6a:23:2e:36:4f:40:
f4:29:de:56:6b:3d:16:c6:ec:ee:d8:43:87:57:d8:
fd:eb:af:d3:af:50:d6:db:26:79:b6:4d:f3:99:e8:
7f:52:30:9a:50:3e:2c:86:6b:8d:c1:23:9f:cf:3c:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:13:1A:32:D9:7F:C9:9A:34:74:8C:CB:C8:34:B6:E6:3F:67:28
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:08:a0:24:f8:4a:07:d3:55:02:e4:89:a4:2e:7d:9e:1f:a1:
ff:fd:bb:21:fe:98:93:c2:c1:4f:61:44:52:4b:83:4c:a6:11:
e0:24:56:0b:6a:27:ea:28:91:69:88:8d:1d:9b:c6:bf:65:90:
51:c7:9c:68:ea:f4:c1:55:c7:dc:cc:b4:65:20:11:6a:57:fc:
7d:1b:52:8f:19:eb:f3:27:1f:90:dd:10:42:1a:16:7b:ba:3e:
fd:f6:ee:8e:fb:f7:d7:d0:23:ed:f1:c8:46:7e:fc:fb:eb:9a:
ac:f2:d0:15:2f:f9:0f:0f:6f:34:e3:97:6f:44:f2:50:f5:97:
c8:5a:f3:3e:66:bd:b3:6e:37:04:97:5a:b0:57:6e:5d:e1:c0:
36:a9:2a:ef:a5:0b:10:1b:ed:2f:6f:4d:81:6f:b2:a2:6d:fd:
70:bb:f8:04:c4:bf:9b:ba:57:aa:df:aa:e5:d6:44:db:95:7a:
d9:6f:ef:9a:69:2a:39:ad:35:ec:99:65:86:93:45:5d:57:00:
dd:aa:80:08:79:c2:93:c0:3d:03:d7:23:3a:1f:13:53:44:7c:
e4:d9:70:3a:1d:41:57:c6:c9:a0:29:fe:93:12:b3:1d:78:19:
f7:71:92:06:f8:2d:2a:62:a4:f6:49:c6:18:3c:af:de:5d:75:
2e:6a:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:02 2026 by rpki-client